I have question on soap request node and ssl.
When calling a webservice over https using soap request node, do we need to enable the checkbox for "enable ssl certificate for hostname check"?
Posted: Tue Sep 23, 2014 5:03 am Post subject: Re: Soap request node
Grand High Poobah
Joined: 18 Nov 2003 Posts: 20756 Location: LI,NY
chris boehnke wrote:
Hi ,
I have question on soap request node and ssl.
When calling a webservice over https using soap request node, do we need to enable the checkbox for "enable ssl certificate for hostname check"?
Pls let me know
Thanks
It is good practice. This allows you to know that www.myaddress.com is really going to www.myaddress.com and not www.hijackedaddress.com.
No matter what the actual ip / dns address is behind the scenes, it has the certificate to say it is the address you requested...
This is the way you authenticate a server doing one way SSL.
You (the client) know which address (dns name) you gave for the server. The cert flowed down to you confirms that the address matches (CN field of the DN).
Using the public key of the server cert for encryption of the encryption key for your traffic guarantees that only the server can decipher your traffic.
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum